# Should I Open Source my Company?

[Supabase](https://yomu.fyi/company/supabase) · Ant Wilson · Mar 25, 2022

**Type:** Explainer

## Summary

Software founders often hesitate to make their companies open source due to concerns regarding code scrutiny, security exploits, and intellectual property theft. Supabase operated as an open-source business from its inception, finding that community scrutiny actually accelerates code refactoring and surfaces security vulnerabilities early through public reporting channels. In addition, rapid execution and developer experience provide stronger competitive defenses against larger competitors than proprietary code obfuscation or software patents. Open repos also transformed the company's hiring strategy by replacing traditional take-home tests and LeetCode interviews with evaluation of real-world pull requests and asynchronous discussions. Finally, external contributors expand product capability by independently developing niche integrations and platform adapters that core startup teams lack the bandwidth to build.

## Context

Software founders frequently avoid open-sourcing their businesses due to three primary fears: public criticism of messy code, malicious exploitation of exposed security vulnerabilities, and intellectual property theft by competing firms.

## Approach / What changed

Supabase made its codebase open source from inception, relying on public security disclosure via security.txt, treating developer experience and execution speed as defensible advantages, and hiring developers directly from repo contributors.

## Takeaways

- Direct community contributions allow companies to assess asynchronous communication and real-world code quality, eliminating the need for LeetCode evaluations and outbound recruiting early on.
- Exposing source code allows independent security researchers to identify and report vulnerabilities early, creating more robust software security over multi-year timeframes than closed systems.
- Open-source models enable community members to build long-tail features and integrations, such as cloud platform adapters, that startup teams cannot prioritize while focusing on majority user requests.

**Tags:** [Developer Experience](https://yomu.fyi/topic/developer-experience), [Hiring](https://yomu.fyi/topic/hiring), [Open Source](https://yomu.fyi/topic/open-source), [Remote Work](https://yomu.fyi/topic/remote-work)

[Read original post](https://supabase.com/blog/should-i-open-source-my-company)